52
views
0
recommends
+1 Recommend
0 collections
    0
    shares
      • Record: found
      • Abstract: found
      • Article: found
      Is Open Access

      Weakness Analysis and Improvement of a Gateway-Oriented Password-Based Authenticated Key Exchange Protocol

      Preprint

      Read this article at

      Bookmark
          There is no author summary for this article yet. Authors can add summaries to their articles on ScienceOpen to make them more accessible to a non-specialist audience.

          Abstract

          Recently, Abdalla et al. proposed a new gateway-oriented password-based authenticated key exchange (GPAKE) protocol among a client, a gateway, and an authentication server, where each client shares a human-memorable password with a trusted server so that they can resort to the server for authentication when want to establish a shared session key with the gateway. In the letter, we show that a malicious client of GPAKE is still able to gain information of password by performing an undetectable on-line password guessing attack and can not provide the implicit key confirmation. At last, we present a countermeasure to against the attack.

          Related collections

          Most cited references3

          • Record: found
          • Abstract: not found
          • Book Chapter: not found

          Authenticated Diffe-Hellman Key Agreement Protocols

            Bookmark
            • Record: found
            • Abstract: not found
            • Book Chapter: not found

            A Simple Threshold Authenticated Key Exchange from Short Secrets

              Bookmark
              • Record: found
              • Abstract: not found
              • Article: not found

              Security analysis and improvement of a gateway-oriented password-based authenticated key exchange protocol

                Bookmark

                Author and article information

                Journal
                1001.2945

                Security & Cryptology
                Security & Cryptology

                Comments

                Comment on this article